Was this page helpful?
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All

4 Protocol Examples

The Group Policy: Deployed Printer Connections Extension allows network administrators to deploy printer connections to a printer that is shared by a central server to multiple client computers.

For example, suppose that in the fabrikam.com domain, a network administrator wants to deploy the printer connection, "\\fabprint44\b2-2003-clr", to all users on the second floor of the building.

The network administrator uses the administrative tool plug-in to add the \\fabprint44\b2-2003-clr printer connection setting to a previously existing GPO named "Deploy b2-2003-clr printer".

The "Floor2" GPO is linked to the Floor 2 Organizational Unit.

User "JohnQ" is a user with a user account in the Floor 2 Organizational Unit. JohnQ regularly logs on to a computer called "JohnQ-Laptop".

When the network administrator configures the printer connections, the administrative tool plug-in performs the following tasks:

  • The network administrator selects the "Deploy b2-2003-clr printer" GPO for editing, and opens a tool that hosts the Deployed Printer Connections administrative tool plug-in.

  • The administrator directs the Deployed Printer Connections administrative tool to deploy printer \\fabprint44\b2-2003-clr to the GPO.

  • Using the Group Policy: Core Protocol [MS-GPOL], the plug-in creates a new msPrint-ConnectionPolicy object in

  • CN=PushedPrinterConnections, CN=User, CN=<GPO_GUID>, CN=Policies, CN=System, DC=fabrikam, DC=com

    where <GPO_GUID> is the curly braced GUID string of the Deploy b2-2003-clr printer GPO.

  • The msPrint-ConnectionPolicy object has the following attributes and values:

  • Attributes

    Values

    uNCName

    \\fabprint44\b2-2003-clr

    printerName

    b2-2003-clr

    serverName

    \\fabprint44

    printAttributes

    0x00000000

When JohnQ logs on to JohnQ-Laptop, the client-side plug-in performs the following tasks:

  • During policy application, the client-side plug-in gets a list of GPOs that apply to the user JohnQ or computer JohnQ-Laptop from the Group Policy system.

  • Using [MS-GPOL], the client-side plug-in issues one LDAP search for each GPO to obtain a list of all printer connection settings that apply to "JohnQ" or "JohnQ-Laptop". In this example, the client-side plug-in discovers a user connection that applies to JohnQ, but does not discover a machine connection that applies to JohnQ-Laptop.

  • The client-side plug-in adds the discovered printer connection \\fabprint44\b2-2003-clr to its DesiredConnections list, as specified in section 3.2.1. It then compares the DesiredConnections list with its PreviouslyAppliedConnections list. It discovers that it needs to add that printer connection to the client machine, because it does not appear in the PreviouslyAppliedConnections list.

  • The printer connections that are specified in the GPOs are added to the client machine. The client-side plug-in now removes the printer connection \\fabprint44\b2-2003-clr from its DesiredConnections list and adds the printer connection to its PreviouslyAppliedConnections list. JohnQ will subsequently observe a representation of that printer connection in the user interface.

Later, the network administrator wants to remove the printer connection \\fabprint44\b2-2003-clr. The network administrator uses the administrative tool plug-in to remove that printer connection setting from the GPO named "Deploy b2-2003-clr printer". The administrative tool plug-in performs the following tasks:

  • The network administrator selects the "Deploy b2-2003-clr printer" GPO for editing, and opens a tool that hosts the Deployed Printer Connections administrative tool plug-in.

  • The administrator directs the Deployed Printer Connections administrative tool to remove printer \\fabprint44\b2-2003-clr from the GPO.

  • Using [MS-GPOL], the plug-in removes the msPrint-ConnectionPolicy object that corresponds to the \\fabprint44\b2-2003-clr from the GPO Deploy b2-2003-clr printer.

When JohnQ logs onto JohnQ-Laptop, the client-side plug-in performs the following tasks:

  • During policy application, the client-side plug-in gets a list of GPOs that apply to the user JohnQ or computer JohnQ-Laptop from the Group Policy system.

  • Using [MS-GPOL], the client-side plug-in issues one LDAP search for each GPO to obtain a list of all printer connection settings that apply to "JohnQ" or "JohnQ-Laptop". In this example, the client-side plug-in discovers that there is no user connection that applies to JohnQ, and there is no machine connection that applies to JohnQ-Laptop.

  • The client-side plug-in compares its DesiredConnections list with its PreviouslyAppliedConnections list; and discovers that it needs to remove printer connection \\fabprint44\b2-2003-clr from the client machine because it appears in the PreviouslyAppliedConnections list but does not appear in the DesiredConnections list.

  • The client-side plug-in removes the printer connection \\fabprint44\b2-2003-clr from the client machine. It also removes the printer connection from its PreviouslyAppliedConnections list. JohnQ will subsequently observe that the representation of the \\fabprint44\b2-2003-clr printer connection is removed from the user interface.

Show:
© 2016 Microsoft